Get ProjectRole from Credentials cache, not query

Signed-off-by: Tim Van Steenburgh <tvansteenburgh@gmail.com>
[#6733] Fixed test of now-corrected errant behavior of DENY

Signed-off-by: Cory Johns <cjohns@slashdotmedia.com>